IP Source/IP Destination
• IP Negation: Match on any IP address that is NOT in the specified IP network range.
• Network IP: Optional field to specify a matching network IP address for this rule to match against.
• Netmask: Use this to define a subnet size this rule will match against.
• Port Negation: Match on any port that is NOT in the specified port range.
• Port(s): Use for a single port or a range of ports. Fill in the left side for a single port.
Use Network IP, Netmask, and Port(s) to specify the ports and addresses for which the rule applies. You can specify a range of
ports or a single port. Similarly, the netmask can be used to define either a range of addresses (i.e. 255.255.255.0) or a single
address (255.255.255.255).
If you leave these values blank, then all IP addresses and ports will be included. IP Source and IP Destination options can be used
to differentiate between the directions that packets go. You could permit packets to come from particular IP addresses but then not
allow packets to return to those addresses.
Example of an IP Filter Rule: Suppose you have opened a port in your firewall in order to run a server. Someone, Johnny, is
abusing that opening, so you would like to restrict his access. Create a rule that will deny Johnny’s IP address.
Add IP Filter Rule
• Name: No more Johnny
• Enabled: Selected
• Action: Deny
• Protocol: Any
IP Source
• Network IP: 172.22.24.160 (Johnny’s IP address)
• Netmask: 255.255.255.255 (This netmask restricts the rule to one single address).
• Port(s): 80
To Next Page
Loading...
